Stateful Inspection Options; Open Ports In Default Stateful Inspection Installation - Motorola 2200 Administrator's Handbook

Stateful Inspection Options

Stateful Inspection Parameters are active on a WAN interface only if you enable them on your Gateway.
• Stateful Inspection: To enable stateful inspection on this WAN interface, check the checkbox.
• Default Mapping to Router: This is disabled by default. This option will allow the router to respond to
traffic received on this interface, for example, ICMP Echo requests.
☛
NOTE:
If Stateful Inspection is enabled on a WAN interface Default Mapping to Router must be
enabled to allow inbound VPN terminations to the router.
•
TCP Sequence Number Difference: Enter a value in this field. This value represents the maximum
sequence number difference allowed between subsequent TCP packets. If this number is exceeded, the
packet is dropped. The acceptable range is 0 – 65535. A value of 0 (zero) disables this check.
•
Deny Fragments: To enable this option, which causes the router to discard fragmented packets on this
interface, check the checkbox.

Open Ports in Default Stateful Inspection Installation

Port
23
53
67
68
80
137
138
161
500
520
Protocol Description
TCP telnet
UDP DNS
UDP Bootps
UDP Bootpc
TCP HTTP
UDP Netbios-ns
UDP Netbios-dgm
UDP SNMP
UDP ISAKMP
UDP Router
LAN (Private) WAN (Public)
Interface Interface
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
No
No
No
No
No
157